awsmock

awsmock is a high performance, persistent AWS simulation. Currently, the following services are supported:

• S3: Amazon Simple Storage Service
• SQS: Amazon Simple Queue Service
• SNS: Amazon Simple Notification Service
• Lambda: Amazon Lambda service
• Cognito: Amazon Cognito identity service
• DynamoDB: Amazon Dynamo database service
• Transfer: Amazon transfer family, supporting FTP
• SecretsManager: Amazon secrets manager service
• KMS: Amazon key management service

awsmock is written in C++ with an optional MongoDB persistence layer. If needed all objects can be stored in the database. The simulation reacts to all AWS commands send to the default port 4566. For a lists of supported command see below tables for the different AWS services.

AwsMock can also be used without persistence layer (for instances used as a test-container). In this cas the configuration and all objects are stored in an in-memory database. As soon as the AwsMock manager goes down all infrastructure and runtime objects are lost.

For control over the behaviour of the AwsMock simulation a awsmockctl command line tool is available. This tool can be used to start/stop/restart the different AwsMock modules, as well as configure some internal stuff needed by the AwsMock manager.

S3 module

Data is stored as objects within resources called “buckets”, and a single object can be up to 5 terabytes in size. Objects can be accessed through S3 Access Points or directly through the bucket hostname. With cost-effective storage classes and easy-to-use management features, you can optimize costs, organize data, and configure fine-tuned access controls to meet specific business, organizational, and compliance requirements.

AwsMock S3 mock simulates a real AWS S3 bucket and its object. They can be copied, added, moved, deleted any some more functions. S3 object are stored on disk and their metadata is part of AwsMock Mongo DB collection. Therefore the MongoDB has two collections: Buckets and Objects. Buckets contain the bucket metadata and teh object collection the object data.

See AwsMock S3 supported commands in the supplied man page.

SQS module

Simple Queue Service (SQS) is a managed messaging service offered by AWS. It allows you to decouple different components of your applications by enabling asynchronous communication through message queues. SQS allows you to reliably send, store, and receive messages with support for standard and FIFO queues.

AwsMock allows you to use the SQS APIs in your local environment to integrate and decouple distributed systems via hosted queues. The supported APIs are available on our API coverage page, which provides information on the extent of SQS’s integration with AwsMock.

See AwsMock SQS supported commands for a list of supported commands.

SNS module

Amazon Simple Notification Service (Amazon SNS) is a managed service that provides message delivery from publishers to subscribers (also known as producers and consumers). Publishers communicate asynchronously with subscribers by sending messages to a topic, which is a logical access point and communication channel. Clients can subscribe to the SNS topic and receive published messages using a supported endpoint type, such as Amazon Kinesis Data Firehose, Amazon SQS, AWS Lambda, HTTP, email, mobile push notifications, and mobile text messages (SMS).

Currently only SQS is supported as endpoint type.

See AwsMock SNS supported commands for a list of supported commands.

Lambdas module

AWS Lambda is a Serverless Function as a Service (FaaS) platform that lets you run code in your preferred programming language on the AWS ecosystem. AWS Lambda automatically scales your code to meet demand and handles server provisioning, management, and maintenance. AWS Lambda allows you to break down your application into smaller, independent functions that integrate seamlessly with AWS services.

AwsMock supports Lambdas, allowing you to use the Lambda API to create, deploy, and test your Lambda functions. The supported APIs are available on our Lambda coverage page, which provides information on the extent of Lambda’s integration with AwsMock.

See AwsMock Lambda supported commands for a list of supported commands.

Transfer family

AWS Transfer Family is a secure transfer service that enables you to transfer files into and out of AWS storage services. Transfer Family is part of the AWS Cloud platform. AWS Transfer Family offers fully managed support for the transfer of files over SFTP, AS2, FTPS, and FTP directly into and out of Amazon S3 or Amazon EFS. You can seamlessly migrate, automate, and monitor your file transfer workflows by maintaining existing client-side configurations for authentication, access, and firewalls—so nothing changes for your customers, partners, and internal teams, or their applications.

AwsMock transfer manager supports an FTP server, which writes the incoming files to a S3 transfer bucket. This transfer manager support fully supports the FTP protocol (FTPS and SFTP are currently not supported). Uploading a file to the FTP server will automatically create a S3 object in the bucket transfer-server. The key of the S3 object will be the full path of the FTP file, including the uploaded directory.

KMS

AWS Key Management Service (AWS KMS) is a managed service that makes it easy for you to create and control the cryptographic keys that are used to protect your data. AWS KMS uses hardware security modules (HSM) to protect and validate your AWS KMS keys under the FIPS 140-2 Cryptographic Module Validation Program. China (Beijing) and China (Ningxia) Regions do not support the FIPS 140-2 Cryptographic Module Validation Program. AWS KMS uses OSCCA certified HSMs to protect KMS keys in China Regions.

AWS KMS integrates with most other AWS services that encrypt your data. AWS KMS also integrates with AWS CloudTrail to log use of your KMS keys for auditing, regulatory, and compliance needs.

You can use the AWS KMS API to create and manage KMS keys and special features, such as custom key stores, and use KMS keys in cryptographic operations. For detailed information, see the AWS Key Management Service API Reference.

See AwsMock KMS supported commands for a list of supported commands.

Secrets Manager

AWS Secrets Manager helps you manage, retrieve, and rotate database credentials, application credentials, OAuth tokens, API keys, and other secrets throughout their lifecycles. Many AWS services store and use secrets in Secrets Manager.

Secrets Manager helps you improve your security posture, because you no longer need hard-coded credentials in application source code. Storing the credentials in Secrets Manager helps avoid possible compromise by anyone who can inspect your application or the components. You replace hard-coded credentials with a runtime call to the Secrets Manager service to retrieve credentials dynamically when you need them.

With Secrets Manager, you can configure an automatic rotation schedule for your secrets. This enables you to replace long-term secrets with short-term ones, significantly reducing the risk of compromise. Since the credentials are no longer stored with the application, rotating credentials no longer requires updating your applications and deploying changes to application clients.

See AwsMock SecretsManager supported commands for a list of supported commands.

Systems Manager

AWS Systems Manager is the operations hub for your AWS applications and resources and a secure end-to-end management solution for hybrid and multicloud environments that enables secure operations at scale. Currently only the parameter store is implemented.

Parameter Store provides secure, hierarchical storage for configuration data and secrets management. You can store data such as passwords, database strings, Amazon Elastic Compute Cloud (Amazon EC2) instance IDs and Amazon Machine Image (AMI) IDs, and license codes as parameter values. You can store values as plain text or encrypted data. You can then reference values by using the unique name you specified when you created the parameter.

See AwsMock SystemsManager supported commands for a list of supported commands.

Getting started

Building AwsMock

Building of the AwsMOck executables is CMake based.

Minimum Requirements:

• GNU Compiler Collection (GCC) 4.9 or later or Clang 3.3 or later
• Poco installed (see Simplify C++ development)
• MongoDB C and CXX driver (see MongoDB C++ driver)
• Development releases of boost, libz, libssl, libcrypto, libarchive, libtbb
• 4GB of RAM.

Building from Source:

Building AwsMock from scratch is a rather time-consuming procedure. For a first glance at AwsMock, better use the provided docker image. Nevertheless, if you need to compile it by your own, here are the instructions.

To create an out-of-source build:

1. Install CMake and the relevant build tools for your platform. Ensure these are available in your executable path.
2. Download the source tree

   git clone https://github.com/jensvogt/awsmock.git
   cd awsmock
   

3. Build the project:

   cmake . -DCMAKE_BUILD_TYPE=Debug -DCMAKE_PREFIX_PATH=<path-to-install>
   cmake --build . --config=Debug
   

4. Install the executables, libraries and man pages:

   cmake --install . --config=Debug
   

5. Start the manager:

   awsmockmgr --deamon --loglevel debug
   

As already said, this can be a time-consuming procedure, depending on your machine and the environment.

Using the docker image

Using the provided docker image is much simpler (assuming Docker is already installed).

To start the docker image:

1. Pull the docker image:

docker pull jensvogt/awsmock:latest

2. Start the container

docker run -p 4566-4567:4566-4567 -e AWSMOCK_MONGODB_ACTIVE=false -v /var/run/docker.sock:/var/run/docker.sock jensvogt/awsmock:latest

This invocation will run with the in-memory database, as the alpine image does not have an own MongoDb instance. Port 4566 (gateway) and 4567 (manager) should be reachable. -e AWSMOCK_MONGODB_ACTIVE=false is needed to use the in-memory database and -v /var/run/docker.sock:/var/run/docker.sock for the communication with the host's docker daemon (lambdas, dynamodb).

If you have problems with the docker daemon connection and you see errors like:

2024-06-01 12:28:46.116 ERROR [1] [Core::DomainSocket::SendJson:18] Could not connect to docker UNIX domain socket, error: Connection refused

you probably need either runs it under root:

sudo docker run -p 4566-4567:4566-4567 -p 6000-6010:6000:6010 -e AWSMOCK_MONGODB_ACTIVE=false -v /var/run/docker.sock:/var/run/docker.sock jensvogt/awsmock:latest

or you can give the current user access to the docker domain socket:

sudo chmod 666 /var/run/docker.sock

Using the docker image with an MongoDB backend

As MongoDB is not supported on alpine, no MongoDB is included in the docker image. Nevertheless, you can connect to an external MongoDB instance running as docker container. In /usr/local/share/awsmock/docker is an example of a docker-compose file.

To connect a MongoDB instance use the provided docker-compose file:

  cd /usr/local/share/awsmock/docker
  docker compose up

This will start a mongo DB instance an awsmock docker image. Remote access to the MongoDB image must be configured separately. See for instance: Getting MongoDB on Linux to Listen to Remote Connections.

Examples

There are a couple of examples shell script available. Depending on your installation directory, there in /usr/share/awsmock or in /usr/local/share/awsmock. Each module has its own directory with bash scripts and resource files. The examples cover almost all AwsMock features. All examples are pretty self explaining.

Some of them require the jq utility (JSON queries). You can install jq using the usual package manager of your Linux distribution. For Windows jq can be downloaded from jq download site.

Simply change to the directory and execute one of the example scripts:

cd /usr/local/share/awsmock/s3
./create-bucket.sh

Windows support

The distribution contains Windows ports of awslocal and awsmockctl in the ./dist/bin directory. This Windows executables are written in Go and ported to Windows. These executables allow to control awsmock from a Windows machine.

c:\Program Files\awsmock\bin\awsmockctl status